On Mon, 2006-04-03 at 12:39 +0200, Erik Slagter wrote:
> On Mon, 2006-04-03 at 01:15 +0200, guenther wrote:
> 
> > The issue is, that the Secure Connections options are named badly, or
> > rather used to be (getting back to this). Always means SSL (port 993),
> > Whenever Possible means StartTLS -- which IIRC starts with port 143 and
> > uses 993 later on, or some such.
> 
> Starttls means that both ends switch over to TLS mode, using the same
> socket. Port 993 has nothing to do with it.
> 
> > However, the real issue behind this is, that the options where named
> > badly. Since 2.6.0, this is corrected and clearly states No encryption,
> > TLS and SSL encryption respectively.
> 
> Hmmm, still not clear. TLS == SSLv3. 
> 
> Something like
> 
> No encryption,
> Starttls,
> Secure IMAP (SSL)
> 
> would be more logical.
> 
> OTOH I don't get it why it should be configurable to enable/disable
> starttls. It either is supported/handshaked on both ends or not.

because there are servers out there that advertise they support STARTTLS
but do not work properly so there needs to be a way for the user to
override. Just like there are POP servers out there that drop the user
if a command is issued that it doesn't understand, instead of simply
returning -ERR and continuing like it is supposed to do according to the
specs.

-- 
Jeffrey Stedfast
Evolution Hacker - Novell, Inc.
[EMAIL PROTECTED]  - www.novell.com

_______________________________________________
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list

Reply via email to